Jboss Enterprise Application Platform Text Only Advisories

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-3223 Maven HIGH PATCH This Week

A flaw was found in undertow. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Undertow Openshift Container Platform Openshift Container Platform For Ibm Linuxone Openshift Container Platform For Power +3

NVD

CVSS 3.1

7.5

EPSS

2.0%

CVE-2020-7238 Maven HIGH POC PATCH This Week

Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Request Smuggling Information Disclosure Netty Fedora Debian Linux +3

NVD GitHub

CVSS 3.1

7.5

EPSS

3.6%

CVE-2023-3223 Maven

EPSS 2% CVSS 7.5

HIGH PATCH This Week

A flaw was found in undertow. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Undertow Openshift Container Platform +5

NVD

CVE-2020-7238 Maven

EPSS 4% CVSS 7.5

HIGH POC PATCH This Week

Request Smuggling Information Disclosure Netty +5

NVD GitHub